deploy-npm
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard developer tools including
git,gh(GitHub CLI),npm, andpnpmto manage the software release lifecycle. These commands are scoped to repository discovery, branch management, and package verification. - [EXTERNAL_DOWNLOADS]: The skill interacts with official package registries (npm) and GitHub APIs for publishing and release management. These are trusted services for the intended purpose of the skill.
- [REMOTE_CODE_EXECUTION]: The workflow facilitates the execution of remote GitHub Actions via
workflow_dispatch. This is a standard and intended function for automated deployment. - [SAFE]: The skill promotes the use of npm Trusted Publishers (OIDC) and provenance, which are security best practices. It also includes instructions for managing releases in hardened environments where runner write-access may be restricted.
Audit Metadata